gMSA - Group Managed Service Account is a feature introduced in Windows Server 2012. It allows for configured hosts to use the user without the password.
Questions tagged [gmsa]
32 questions
1
vote
2 answers
Classic ASP/MSSQL Authentication Issue using CredSpec
I'm currently trying to make some improvements to some old (and soon to be phased out) infrastructure in preperation for a move to .NET core. We have a small feedback form which writes into a SQL table using SQLOLEDB connection strings. These…

jimbo8098
- 103
- 1
- 7
1
vote
1 answer
PowerShell script using gMSA and Get-ADGroupMember
We have a PowerShell script that will enumerate the members of a specified AD group and then will create a text file with login ID and Name. The script will when create an email to Managers informing them of the membership of the AD Groups that…

Star Gryphon
- 11
- 1
- 3
1
vote
1 answer
Create gMSA with managed AD on google cloud
For a POC for using AD on the google cloud with kuberenetes, I created a managed active directory, as is described in this link.
To add a gMSA account for the AD, I looked at this documentation.
It looks like I should use the New-ADServiceAccount…

john goodheart
- 21
- 5
1
vote
1 answer
How to create GMSA account via C#
I have tried to look for the c# code example to see how the AD service account is created but not much luck. Anyone can provide an example code for creating AD service account please?
I have tried UserPrincipal with $ at the end of the name but not…

Jawad
- 11,028
- 3
- 24
- 37
1
vote
1 answer
Access Azure Files with GMSA Account
I want to have Microsoft SQL Server Agent Jobs run under a GMSA account, but they need to have access to an Azure Files container in an Azure Storage account.
Everything I've found so far points to storing the Azure Files credentials in the Windows…

RWGodfrey
- 847
- 1
- 9
- 19
0
votes
0 answers
Windows services using domain accounts cannot logon after VM restart
We have an issue when restarting VMs where services are not starting after the restart. The services are configured to use domain accounts and set to startuptype automatic.
We tried different account "types" for our services.
Used operating system:…

ducato66
- 53
- 1
- 3
0
votes
0 answers
gMSA scheduled task cannot connect to S3 host
I've created a powershell script that collates specific files from all servers in a domain to a central management server, and then compresses and uploads to our cloud service providers S3 bucket (not Amazon).
It works as intended, however when…

Ian
- 41
- 3
0
votes
1 answer
Getting CORS denied GMSA for MSSQL in appconfig.json of Angular + .Net project
We have hosted a few Angular and .Net Services. In the same server, we have MSSQl configured. When all the service's app pools in IIS, MSSQL Services etc were assigned to the my id, appication was giving CORS failures and I disabled webDAV. After…

Haris
- 85
- 2
- 9
0
votes
1 answer
AAD connect provisioning credentials
How can I find the credentials for this?
Please see image below.

jasmer
- 25
- 5
0
votes
0 answers
C# - how to retrieve gMSA account password?
how to retrieve gMSA account password in C#?
I need to use gMSA account to disable/enable AD account.
But I don't know how to get gMSA password?
public static bool DisableUserAccount(string sUserName)
{
UserPrincipal…

Frank Kuo
- 17
- 2
0
votes
1 answer
How to debug a Visual Studio 2022 console application running as a service using a gMSA
I am building a .NET 6 application in C# using Visual Studio 2022. The application has a worker service that runs a console application. A Group Managed Service Account (gMSA) has been created for me and I can successfully install the service (using…

joeschwa
- 3,083
- 1
- 21
- 41
0
votes
1 answer
How to start process as gmsa account?
I collected bits and pieces of code about gMSA accout password. There are few articles mentioning how to get password but none of articles verifies fetched password. I created new GMSA account and specified my user and computer when I run script as…

zdenko.s
- 931
- 1
- 12
- 29
0
votes
1 answer
Start Process within Windows Container as a domain user
I have a Windows 2019 container started with a valid CredentialSpec from a valid working gMSA account. It currently hosts a .NET 4.x application on IIS with Windows Authentication working just great. I can also execute nltest commands successfully…

Antebios
- 1,681
- 1
- 13
- 22
0
votes
0 answers
Trouble using gMSA on IIS pool identity
Done various searches and I believe I have everything right, but things still aren't working correctly.
I've installed the gMSA and get a true when running Test-ADServiceAccount. I've added the account to the Log on as a batch job in local security…

Dagnis
- 13
- 4
0
votes
0 answers
Scheduled task with GMSA fails when running remote exe
I have a scheduled task running as a GMSA account with highest privileges. The task kicks off a cmd file that in turn calls two exe's. One exe is on the server with the scheduled task. The other exe is on a remote network share. The GMSA has…

ktri
- 33
- 5